Re: [draft PATCH] whitelist support for refuse options

2020-05-17 Thread Wayne Davison via rsync
On Sun, Feb 9, 2020 at 2:06 PM Nick Cleaton via rsync wrote: > This adds support for whitelisting the acceptable options in the "refuse > options" setting in rsyncd.conf. It introduces "!" as a special option > string that refuses most options and interprets any following strings as > patterns of

Re: [draft PATCH] whitelist support for refuse options

2020-02-11 Thread Nick Cleaton via rsync
On Tue, 11 Feb 2020 at 01:36, raf via rsync wrote: > rrysnc > sshdo - controls which commands may be executed via incoming ssh > authprogs - SSH Command Authenticator Those work for command line argument restrictions, but I like daemon mode for restriction. It's a way to tell rsync directl

Re: [draft PATCH] whitelist support for refuse options

2020-02-10 Thread raf via rsync
Hi Nick, Just in case you aren't already aware of it, there is a tool that limits rsync to particular directories: rrsync - Restricts rsync to subdirectory declared in .ssh/authorized_keys https://www.samba.org/ftp/unpacked/rsync/support/rrsync There is also a generic tool (I wrote this one)